During the initial installation of VergeIO a self signed certificate is created automatically for the "root" level of the system. Upon tenant creation a new self signed certificate is also automatically created for the instance.
Using the built in functionality of Let's Encrypt an administrator is able to create a trusted SSL certificate on a per VDC basis providing the setting is enabled. This method is "set and forget" since once the certificate is created all renewals are handled automatically by the software every 60 days.
To use this functionality one of the following conditions must be met
A manual certificate generated from a trusted authority may also be used. The required format for a manual SSL certificate is .PEM. This format should include a public key, a private key, and a chain key that will be entered into the designated fields during configuration.